Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
File:                     CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json)
Hash identifier:          1R8JBW0l/Vzxais0WElVwu7EYgW0G26WlaWtG2Tpk3Y=
Subject key identifier:   AC:FC:4E:C9:3E:88:D5:5F:A7:9E:A6:2D:6B:FE:0A:E7:FF:89:0D:08
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Certificate issuer:       /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial:       02FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
Manifest number:          02E1
Signing time:             Mon 27 Jul 2026 02:40:29 +0000
Manifest this update:     Mon 27 Jul 2026 02:40:29 +0000
Manifest next update:     Mon 03 Aug 2026 02:40:29 +0000
Files and hashes:         1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: 7dH3pKov/RXGTVD1aPAuzZm9MwUOM2qxs2YQ2jcPh+I=)
                          2: 5F5A375CFF0C11F0AEE33AB880EE528E.roa (hash: jKaERdadgN/bTNsY3N2ri9io7PkqOZ7TSU8weedDHCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
                          rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292
        Validity
            Not Before: Jul 27 02:40:29 2026 GMT
            Not After : Aug  3 02:40:29 2026 GMT
        Subject: CN=6a66c51d-aabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:09:94:b1:fb:f6:a8:cd:6b:c5:c4:ec:e3:
                    56:61:d8:6d:cb:bb:2d:0b:04:a9:6e:3e:a8:28:b4:
                    ae:56:60:1d:91:73:4e:22:80:9d:e2:68:7a:97:50:
                    dd:b9:79:dc:07:43:f2:8d:86:4c:c8:1e:77:9c:5e:
                    01:01:a5:d4:dd:30:8e:55:10:c7:34:e5:19:dd:4f:
                    06:05:db:b6:f1:73:95:3d:eb:4e:89:59:19:44:c7:
                    1a:dd:95:f5:e5:ba:0e:ad:1c:4d:f2:69:b3:32:aa:
                    b6:dd:ac:8e:c3:4e:43:de:94:71:7b:ac:23:a3:d8:
                    70:b5:a2:61:e7:e8:63:7a:20:42:2b:62:74:4a:8c:
                    72:79:3f:14:2f:56:ef:e9:59:3d:7a:47:2c:c3:fa:
                    88:51:3a:81:b5:e8:dc:62:74:63:1d:09:22:6f:cc:
                    3b:13:c4:7c:b7:c1:a6:20:ea:f5:f5:9f:f2:70:8e:
                    30:7e:03:5a:34:6f:8f:fb:ff:0a:1f:c2:1e:de:d8:
                    9f:b0:3e:4c:1b:56:7b:3e:0d:de:3d:f5:d9:60:c5:
                    1d:19:13:8d:8e:23:69:1a:a2:83:54:64:d8:67:83:
                    e6:e8:ab:be:15:cf:51:c8:9e:f3:a6:60:ce:ef:a6:
                    a6:cd:0f:3e:50:a2:6d:68:83:ab:49:c4:bc:ff:20:
                    ba:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:4E:C9:3E:88:D5:5F:A7:9E:A6:2D:6B:FE:0A:E7:FF:89:0D:08
            X509v3 Authority Key Identifier:
                keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:16:d4:e2:71:e2:96:f5:a5:03:9a:53:73:6f:01:63:c4:81:
         03:8f:79:c0:4c:84:2b:c8:a8:2d:da:d4:ab:db:3b:51:a3:d4:
         d3:7b:ff:e8:af:7c:e5:aa:91:bd:7a:1f:32:2e:63:c0:98:44:
         a8:4a:53:46:2a:9e:8f:76:41:e3:17:20:d1:13:44:f9:9c:01:
         c4:00:5c:80:e5:0c:c9:5f:22:d8:2c:14:01:0f:cd:54:d4:b8:
         a0:0e:4f:44:cd:af:a2:f0:5e:e6:c6:fa:86:e4:5f:0e:86:5b:
         50:ee:e6:a4:08:5d:9f:7a:f4:6f:35:7a:3c:00:d9:2c:55:33:
         f9:0e:9b:5b:22:11:64:08:63:87:3e:02:5f:b0:03:e9:67:f4:
         de:e4:a5:a6:7f:a5:95:f1:08:eb:3f:d1:f3:95:c9:42:b5:ed:
         c5:05:78:7a:96:81:42:28:e4:fe:54:46:fb:dd:00:a1:6e:12:
         7b:0b:97:05:e7:17:f4:7d:84:5b:9f:00:6d:26:9e:61:d8:e7:
         dd:93:93:64:01:7b:2a:fd:be:1c:6c:fc:59:ec:ff:90:4b:58:
         c5:d8:8f:0a:4d:39:41:68:78:9a:0f:ca:4b:32:9c:61:50:5f:
         fa:f8:1e:b0:88:34:f0:5c:b1:46:54:e0:60:9d:48:a9:42:3f:
         7f:8c:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:13 2026 by rpki-client